Nanjing Nari Information & Communication Technology Co., Ltd.

Yongming Cao

Wei Liu

Jian Zhou

Chao Wu

Shishun Zhu

Nannan Guo

Weiyong Yang

Yiming Zhu

Yongjian Cao

Zengzhou Ma

Haotian Zhang

Yibin Huang

Peng Gao

Qiuhan Tian

Longyun Qi

Xingshen Wei

Huishui Li

Disclosed are a method and system for detecting a complex multi-step attack in an electric power system. The method includes: collecting interaction behavior data of a network entity; preprocessing the interaction behavior data of the network entity based on a heterogeneous graph to obtain input data; and inputting the input data into a complex multi-step attack detection module to obtain an attack detection result. Information is extracted from the interaction behavior data to construct a node and an edge of the heterogeneous graph. Timestamp information of a destination node and an adjacent source node of the destination node is input into a Time2Vec layer to obtain a first time embedding representation. Data that fuses node feature information and the first time embedding representation is input into a Heteformer layer, and a second node embedding representation is obtained as input data and input into the complex multi-step attack detection module.

Method and system for detecting complex multi-step attack in electric power system

Growing community of inventors

Jiangsu, China

Yongming Cao